CVE-2026-42562

creationtimestamp| type| source ---|---|--- 2026-05-09 21:02:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5dtx2v42n 2026-05-09 21:20:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh6fd7nxr2k 2026-06-05 14:49:28+00:00| seen|...

CVE-2026-42562 Plainpad: Privilege Escalation via Writable Admin Field in Profile Update (Access Control)

Plainpad is a self hosted note taking app. Prior to version 1.1.1, Plainpad allows a low-privilege authenticated user to self-escalate to administrator by submitting admin=true in PUT /api.php/v1/users/id. The endpoint directly persists the admin attribute from user input, and the escalated accou...

CVE-2026-42562

Plainpad is a self hosted note taking app. Prior to version 1.1.1, Plainpad allows a low-privilege authenticated user to self-escalate to administrator by submitting admin=true in PUT /api.php/v1/users/id. The endpoint directly persists the admin attribute from user input, and the escalated accou...

CVE-2024-42562

Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at preview.php...

CVE-2024-42562

Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at preview.php...

CVE-2023-42562

creationtimestamp| type| source ---|---|--- 2023-12-23 11:41:57+00:00| seen| https://t.me/ctinow/158789...

CVE-2023-42562

CVE-2023-42562 affects Samsung devices via the libFacePreProcessingjni.camera.samsung.so library, where an integer overflow in the function detectionFindFaceSupportMultiInstance can trigger a heap overflow. Technical details indicate versions prior to SMR Dec-2023 Release 1 are affected. Remediat...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in Android. A malicious person can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code execution User rights Access to sensitive data...

CVE-2021-42562

CVE-2021-42562 affects CALDERA 2.8.1 with an improper privilege separation, allowing non-admin users to read/modify configurations or other admin-only components. This description is corroborated by multiple connected sources (e.g., CNVD-2022-08044). No explicit remediation or patch details are p...